aio-libs-aiobotocore-1537

examples
plugins
pyproject.toml
tests
uv.lock

831:    async def _resolve_source_credentials(self, role_config, profile_name):
835:            return await self._resolve_credentials_from_source(
839:        source_profile = role_config['source_profile']
840:        self._visited_profiles.append(source_profile)
842:        return await self._resolve_credentials_from_profile(source_profile)
844:    async def _resolve_credentials_from_profile(self, profile_name):
856:            return self._resolve_static_credentials_from_profile(profile)
876:    def _resolve_static_credentials_from_profile(self, profile):
888:    async def _resolve_credentials_from_source(
911:    async def load(self):
1017:    async def load(self):
1065:    async def load_credentials(self):
1139:    async def load(self):
1262:    async def load(self):

            return await self._load_creds_via_assume_role(self._profile_name)

    async def _load_creds_via_assume_role(self, profile_name):
        role_config = self._get_role_config(profile_name)
        source_credentials = await self._resolve_source_credentials(
            role_config, profile_name
        )

        extra_args = {}
        role_session_name = role_config.get('role_sess
…[4620 chars omitted]…
          ),
            )
        named_provider_feature_id = self.NAMED_PROVIDER_FEATURE_MAP.get(
            credential_source
        )
        if named_provider_feature_id:
            self._feature_ids.add(named_provider_feature_id)
        return credentials


class AioAssumeRoleWithWebIdentityProvider(AssumeRoleWithWebIdentityProvider):
840:        self._visited_profiles.append(source_profile)

        role_config = {
            'role_arn': role_arn,
            'external_id': external_id,
            'mfa_serial': mfa_serial,
            'role_session_name': role_session_name,
            'source_profile': source_profile,
            'credential_source': credential_source,
        }

   
…[640 chars omitted]…
is None:
            raise PartialCredentialsError(
                provider=self.METHOD,
                cred_var='source_profile or credential_source',
            )
        elif credential_source is not None:
            self._validate_credential_source(profile_name, credential_source)
        else:
            self._validate_source_profile(profile_name, source_profile)

        return role_config

        source_profile = profiles[source_profile_name]

        # Make sure we aren't going into an infinite loop. If we haven't
        # visited the profile yet, we're good.
        if source_profile_name not in self._visited_profiles:
            return

        # If we have visited the profile and the profile isn't simply
        # referencing itself, that's an infinite loop.
        if source_profile_name != parent_profile_nam
…[291 chars omitted]…
ion all in the same
        # profile. This will only ever work for the top level assume
        # role because the static credentials will otherwise take
        # precedence.
        if not self._has_static_credentials(source_profile):
            raise InfiniteLoopConfigError(
                source_profile=source_profile_name,
                visited_profiles=self._visited_profiles,
            )

            return await self._load_creds_via_assume_role(self._profile_name)

    async def _load_creds_via_assume_role(self, profile_name):
        role_config = self._get_role_config(profile_name)
        source_credentials = await self._resolve_source_credentials(
            role_config, profile_name
        )

        extra_args = {}
253:        def __init__(self, refresh):
294:    def __init__(self, *args, **kwargs):
434:    def __init__(self, refresh_using, method, time_fetcher=_local_now):
515:    def __init__(
556:    def __init__(self, *args, popen=asyncio.create_subprocess_exec, **kwargs):
1010:    def __init__(self, *args, **kwargs):

            # Track visited profiles per load() call so that concurrent
            # loads on the same provider instance don't interfere with
            # each other's source_profile chain resolution.
            self._visited_profiles_stack.append([self._profile_name])
            try:
                return await self._lo
…[2848 chars omitted]…
MED_PROVIDER')
            return await self._resolve_credentials_from_source(
                credential_source, profile_name
            )

        source_profile = role_config['source_profile']
        self._visited_profiles_stack[-1].append(source_profile)
        self._feature_ids.add('CREDENTIALS_PROFILE_SOURCE_PROFILE')
        return await self._resolve_credentials_from_profile(source_profile)

456:    refresher = credentials.AioAssumeRoleWithWebIdentityCredentialFetcher(
483:    refresher = credentials.AioAssumeRoleWithWebIdentityCredentialFe
…[168 chars omitted]…
er = credentials.AioAssumeRoleProvider(
680:    provider = credentials.AioAssumeRoleProvider(
738:    provider = credentials.AioAssumeRoleProvider(
756:# From class TestAssumeRoleWithWebIdentityCredentialProvider
785:    provider = credentials.AioAssumeRoleWithWebIdentityProvider(
1297:        assume_role_provider = AioAssumeRoleProvider(
1755:    return credentials.AioBaseAssumeRoleCredentialFetcher(

            },
            'non-static': {
                'role_arn': 'myrole',
                'credential_source': 'Environment',
            },
            'chained': {
                'role_arn': 'chained-role',
                'source_profile': 'development',
            },
        }
    }

    def _f(config=None):
        return lambda: config or fake_config

    return _f


async def test_assumerolecredprovider_assume_role_no_cache(
    credential_provider, assumerolec
…[4604 chars omitted]…
   await creds.get_frozen_credentials()

        local_now.return_value = expiration_time
        with pytest.raises(credentials.RefreshWithMFAUnsupportedError):
            await creds.get_frozen_credentials()


# From class TestAssumeRoleWithWebIdentityCredentialProvider
async def test_assumerolewebidentprovider_no_cache():
    future = datetime.now(tzlocal()) + timedelta(hours=24)

    response = {

91-            if isinstance(self._resp, list):
92-                return self._resp.pop(0)
93-            return self._resp
94-
--
104:def some_future_time():
105-    timeobj = datetime.now(tzlocal())
106-    return timeobj + timedelta(hours=24)
107-
108-
109-def get_expected_creds_from_response(response):
110-    expiration = response['Credentials']['Expiration']
111-    if isinstance(expiration, datetime):
112-        expiration = expiration.isoformat()
113-    return {
114-        'access_key': response['Credentials']['
…[355 chars omitted]…
e'):
126-        # 'None' so that we can differentiate from None
127-        provider = mock.Mock()
128-        provider.METHOD = method
129-        provider.CANONICAL_NAME = canonical_name
130-
131-        async def load():
132-            if creds != 'None':
133-                return creds
134-
135-            return mock.Mock()
136-
137-        provider.load = load
138-        return provider
139-

           ^^^^^^^^^^^^^^^
  File "/tmp/repro.py", line 23, in main
    results = await asyncio.gather(*(provider.load() for _ in range(5)))
              ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
  File "/repo/aiobotocore/credentials.py", line 782, in load
    return await self._load_creds_via_
…[752 chars omitted]…
already been visited. Visited profiles: ['a', 'b']
On branch master
Changes not staged for commit:
  (use "git add <file>..." to update what will be committed)
  (use "git restore <file>..." to discard changes in working directory)
	modified:   aiobotocore/credentials.py

no changes added to commit (use "git add" and/or "git commit -a")
Dropped refs/stash@{0} (37d5798e165cbc6385d741ede616d63e7a468871)